It is conceivable that `/tmp` is mounted noexec. It might be worthwhile to make the path configurable.